Lucene search
+L

3794 matches found

BDU FSTEC
BDU FSTEC
added 2021/02/16 12:0 a.m.6 views

The vulnerability of the _proc_pax function (Lib/tarfile.py) in the Python programming language allows a attacker to cause a service failure.

The vulnerability of the procpax function in the Lib/tarfile.py module of the Python interpreter is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

7.8CVSS6.8AI score0.06253EPSS
SaveExploits0References20Affected Software11
BDU FSTEC
BDU FSTEC
added 2021/02/11 12:0 a.m.8 views

The vulnerability of the Java library for reading and writing MS Office documents using Apache POI, related to executing a loop with an unreachable exit condition, allows attackers to cause service failures.

The vulnerability of the Java library for reading and writing MS Office documents using Apache POI is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.8CVSS7.3AI score0.10142EPSS
SaveExploits3References5Affected Software17
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.9 views

The vulnerability of the Push API interface on Mozilla Firefox’s browser allows a perpetrator to gain unauthorized access to protected information or cause a service failure.

The vulnerability of the Push API interface of Mozilla Firefox’s browser is related to a lack of mechanisms for verifying input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures...

8.5CVSS7.7AI score0.01605EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.7 views

The vulnerability of SELinux’s access control system in the Linux operating system allows a perpetrator to trigger a service failure.

The vulnerability of SELinux’ access control system in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

7.1CVSS6.5AI score0.03097EPSS
SaveExploits0References37Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.10 views

The vulnerability of the Administration component of the Oracle BI Publisher software allows a malicious individual to gain unauthorized access to protected information. This access includes reading, modifying, adding, or deleting data, as well as causing service failures.

The vulnerability of the Administration component of the Oracle BI Publisher software for creating reports is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, to read, modify, add, or delete data...

8CVSS7.5AI score0.011EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.7 views

The vulnerability of the Apache Tomcat application server, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially crafted sequence of HTTP/2 requests...

7.8CVSS7.4AI score0.26699EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.8 views

The vulnerability of the web interface of microprogramming software for Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the web interface of microprogramming software for Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...

9CVSS7.5AI score0.02194EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.9 views

The vulnerability of the web interface of microprogramming software for Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the web interface of microprogramming software for Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...

9CVSS7.5AI score0.02194EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.13 views

The vulnerability of the web interface of microprogramming software for Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the web interface of microprogramming software for Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...

9CVSS7.5AI score0.02194EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:0 a.m.11 views

The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment lies in insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.8CVSS7.1AI score0.04908EPSS
SaveExploits0References2Affected Software2
Tenable Nessus
Tenable Nessus
added 2021/01/20 12:0 a.m.39 views

EulerOS 2.0 SP3 : dovecot (EulerOS-SA-2021-1064)

According to the versions of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource...

7.5CVSS6.6AI score0.05215EPSS
SaveExploits2References3
OSV
OSV
added 2021/01/16 11:24 a.m.8 views

OPENSUSE-SU-2021:0079-1 Security update for ceph

This update for ceph fixes the following issues: Security issues fixed: - CVE-2020-27781: Fixed a privilege escalation via the cephvolumeclient Python interface bsc1179802 bsc1180155. Non-security issues fixed: - Fixes an issue when check in legacy collection reaches end. bsc1179139 - Fixes an...

7.1CVSS7.3AI score0.0031EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2021/01/14 12:0 a.m.5 views

The vulnerability of the ProcXIChangeHierarchy function in the X Window System Xorg-server allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ProcXIChangeHierarchy function in the X Window System Xorg-server is related to integer overflows. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

5.9CVSS7.2AI score0.00629EPSS
SaveExploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.7 views

The vulnerability of the fly-qdm graphical interface is related to the default access settings, which allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fly-qdm graphical shell is related to the access rights settings when connecting via RDP for a user whose graphical console mode is enabled. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...

7.5CVSS5.5AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.7 views

The vulnerability of the fly-wm window manager, related to the bypassing of authentication due to a fundamental error, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fly-wm window manager is related to the password prompt displayed during session blocking. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

5.9CVSS5.5AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.7 views

The vulnerability of the Firefox ESR and Firefox web browsers’ parsing module, as well as the Thunderbird email client, stems from a lack of mechanisms for verifying data authenticity. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Firefox ESR and Firefox web browsers’ parsing module, as well as the Thunderbird email client, is related to a lack of mechanisms for verifying data authenticity. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

9.3CVSS7.7AI score0.0102EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.7 views

The vulnerability in the memory of Firefox web browsers, Firefox ESR, and the Thunderbird email client involves an operation that goes beyond the allowed limits of the data buffer. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the memory of Firefox web browsers, Firefox ESR, and the Thunderbird email client relates to the execution of operations beyond the allowed boundaries of the data buffer. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its...

9.3CVSS7.8AI score0.02401EPSS
SaveExploits0References19Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.5 views

The vulnerability of the Firefox, Firefox ESR, and Thunderbird software lies in the fact that certain operations go beyond the allowed boundaries of the data buffer. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Firefox, Firefox ESR, and Thunderbird software is related to the execution of operations beyond the acceptable data buffer limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.4AI score0.02688EPSS
SaveExploits1References17Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.4 views

The vulnerability of the PostgreSQL database management system, related to an unreliable search path, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PostgreSQL database management system is related to an unreliable search path mechanism. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

7.3CVSS7.2AI score0.00532EPSS
SaveExploits0References17Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/12/30 12:0 a.m.8 views

The vulnerability of the OpenSSL library used in the WildFly server, related to uncontrolled resource consumption, allows attackers to cause service failures or gain full access to the system.

The vulnerability of the OpenSSL library used by the WildFly server is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures or gain full access to the system...

7.8CVSS7.2AI score0.02183EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder